Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
File: uZDIXPoM7VKDY0mX56SqjOeDbbY.mft (raw, json)
Hash identifier: U9HKJoJCDqfFglwmANCCzd9p+jWI6VPV1Iy8Q6M0JIg=
Subject key identifier: DD:F4:D5:76:8A:3A:34:7C:E4:E7:9D:16:F8:71:0C:11:9D:CF:25:64
Authority key identifier: B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
Certificate issuer: /CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Certificate serial: 019757C88A29F8ED018724626D92202BA087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 03:00:49 +0000
Manifest this update: Tue 10 Jun 2025 03:00:49 +0000
Manifest next update: Wed 11 Jun 2025 03:00:49 +0000
Files and hashes: 1: fhezsDFSO4Gg3v-2EzPO1VJN5k4.roa (hash: Hb04qv2mCfUH3swl1KX6h239vXc62PCAwsB9N2VdCD0=)
2: uZDIXPoM7VKDY0mX56SqjOeDbbY.crl (hash: PoRJXrTgaijr2PhzkmVol1Gej1RCr350jY2efxG8Hpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:c8:8a:29:f8:ed:01:87:24:62:6d:92:20:2b:a0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b990c85cfa0ced5283634997e7a4aa8ce7836db6
Validity
Not Before: Jun 10 03:00:49 2025 GMT
Not After : Jun 11 03:00:49 2025 GMT
Subject: CN=ddf4d5768a3a347ce4e79d16f8710c119dcf2564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0d:35:8c:6e:58:4f:d9:16:e6:d5:d9:1e:76:
6f:5c:fe:bf:09:98:6b:f5:b9:ce:ab:82:69:6a:e5:
ed:1b:e3:34:cd:d4:1b:32:d1:d0:c4:84:2d:0a:3a:
b6:bd:06:99:03:f1:86:df:9b:77:ac:a8:bd:b5:50:
ec:cc:94:e6:6f:07:df:26:81:57:51:00:c7:f5:86:
70:97:75:1f:2a:06:91:2e:f3:dc:66:34:65:f7:bd:
78:3d:a3:35:31:23:d2:ef:70:dc:9f:e9:9f:b7:64:
d1:e2:69:77:c4:fb:38:7d:25:ee:5f:d9:36:f2:50:
79:02:58:5d:c6:23:34:61:de:7e:18:7a:d9:c2:d8:
c2:e4:41:a6:d3:81:19:44:a4:c1:6a:4a:e5:fa:be:
39:3e:00:0e:bd:4a:ff:6a:c4:24:17:f6:0e:ae:3a:
a4:bb:b3:3d:75:12:b9:e1:3c:e0:c5:2f:2f:bd:e3:
b2:9b:93:dc:f2:99:4a:31:ae:64:5e:58:b8:53:0d:
36:66:2b:9c:f7:03:b7:81:ee:44:10:41:ef:d5:56:
c4:4a:39:eb:c9:6d:92:2f:5d:8d:1c:52:60:35:a9:
f2:5b:b7:b9:64:70:ac:88:5d:17:0f:0a:f7:0f:7e:
22:b3:eb:b7:ef:de:7e:5c:aa:bf:28:f3:6a:8c:3e:
4a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F4:D5:76:8A:3A:34:7C:E4:E7:9D:16:F8:71:0C:11:9D:CF:25:64
X509v3 Authority Key Identifier:
keyid:B9:90:C8:5C:FA:0C:ED:52:83:63:49:97:E7:A4:AA:8C:E7:83:6D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZDIXPoM7VKDY0mX56SqjOeDbbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/170ecd-e577-4058-9358-473f15ec0d52/1/uZDIXPoM7VKDY0mX56SqjOeDbbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:29:87:54:f8:ff:c5:89:be:47:46:9a:2f:2e:dc:84:8c:9b:
f6:aa:99:dd:74:4a:8f:db:5f:d7:a6:62:28:8b:fb:c2:b2:9f:
c3:cd:69:46:ab:aa:d1:79:8e:77:fb:91:d4:6a:44:f0:b2:9f:
49:44:63:cf:f7:9d:6e:f8:24:db:cf:d6:00:ae:0b:27:79:41:
fe:48:18:b7:b1:56:59:e8:b8:ec:98:4c:c3:89:b2:1f:6b:f0:
ae:64:41:76:2c:ba:0e:74:56:de:9b:26:0e:14:d9:1e:99:70:
41:2d:6f:b2:ae:32:e5:a6:f8:ce:21:f6:5d:77:6b:f6:ff:c9:
eb:3a:81:f6:c9:c1:94:fa:a5:88:2d:b4:03:f1:46:88:e5:07:
94:dc:d6:f6:f7:e0:76:38:c0:04:ac:df:6e:f1:cf:9b:9f:e4:
29:9f:b2:54:16:fa:ab:30:c8:09:af:4c:32:ad:e5:78:4c:1c:
69:93:8e:7e:7c:d6:c2:ed:74:2c:7a:d8:a2:04:53:de:e8:98:
39:f0:f1:80:96:9f:bb:61:d6:b3:3c:0f:80:df:62:60:75:6a:
52:4c:15:02:65:27:6a:3e:99:de:5e:81:14:11:b6:6a:57:2f:
5a:2c:d5:66:1a:9f:0c:7c:28:ae:82:0b:56:61:1c:fc:b6:89:
73:4e:3a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:28:25 2025 by rpki-client